YubiKey

YubiKey NEO and NEO-n USB devices.

The YubiKey is a hardware authentication device manufactured by Yubico that supports one-time passwords, public key encryption and authentication, and the Universal 2nd Factor (U2F) protocol[1] developed by the FIDO Alliance. It allows users to securely login to their accounts by emitting one-time passwords or using a FIDO-based public/private key pair generated by the device. YubiKey also allows for storing static passwords for use at sites that do not support one-time passwords.[2] Facebook uses YubiKey for employee credentials,[3] and Google supports it for both employees and users.[4][5] Some password managers support YubiKey.[6][7]

The devices implement the HMAC-based One-time Password Algorithm (HOTP) and the Time-based One-time Password Algorithm (TOTP), and identify themselves as a keyboard that delivers the one-time password over the USB HID protocol. The NEO and NEO-n devices also implement OpenPGP card protocol using 2048-bit RSA keys. This allows users to sign, encrypt and decrypt messages without exposing the private keys to the outside world. The NEO device also has NFC support. The 4th generation YubiKey, launched on November 16, 2015, includes support for OpenPGP with 4096-bit RSA keys, and PKCS#11 support for PIV smart cards, a feature that allows for code signing of Docker images.[8][9]

Founded in 2007 by CEO Stina Ehrensvärd, Yubico is a private company with offices in Palo Alto, Seattle, Stockholm and London.[10]

See also

References

  1. ↑ "Specifications Overview". FIDO Alliance. Retrieved 4 December 2015.
  2. ↑ "What Is A Yubikey". Yubico. Retrieved 7 November 2014.
  3. ↑ McMillan (3 October 2013). "Facebook Pushes Passwords One Step Closer to Death". Wired. Retrieved 7 November 2014.
  4. ↑ Diallo, Amadou (30 November 2013). "Google Wants To Make Your Passwords Obsolete". Forbes. Retrieved 15 November 2014.
  5. ↑ Blackman, Andrew (15 September 2013). "Say Goodbye to the Password". The Wall Street Journal. Retrieved 15 November 2014.
  6. ↑ "YubiKey Authentication". LastPass. Retrieved 15 November 2014.
  7. ↑ "KeePass & YubiKey". KeePass. Retrieved 15 November 2014.
  8. ↑ "Launching The 4th Generation YubiKey". Yubico. Retrieved 20 November 2015.
  9. ↑ "With a Touch, Yubico, Docker Revolutionize Code Signing". Yubico. Retrieved 20 November 2015.
  10. ↑ "The Team". Yubico. Retrieved 12 September 2015.

External links


This article is issued from Wikipedia - version of the Friday, December 04, 2015. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.